OS2 World Forum

OS/2 - SIGs => Security => Topic started by: IBManners on 2010.12.05, 16:15:32

Title: Cybergang Compromises Every ATM In Russian City
Post by: IBManners on 2010.12.05, 16:15:32
"A group of fraudsters has been arrested in Yakutsk and Moscow for allegedly compromising all the ATMs in the city of Yakutsk — population: around 210,000 — in the Republic of Yakutia in the Russian Federation. Three of the men formed the actual criminal group, and the fourth — a Moscow-based malware developer — was 'subcontracted' by them and received 100,000 rubles (some $3200) to develop a custom ATM virus with which they would infect the devices."

http://yro.slashdot.org/story/10/12/04/1531252/Cybergang-Compromises-Every-ATM-In-Russian-City (http://yro.slashdot.org/story/10/12/04/1531252/Cybergang-Compromises-Every-ATM-In-Russian-City)
http://www.net-security.org/malware_news.php?id=1555 (http://www.net-security.org/malware_news.php?id=1555)

Been looking around and there is no mention if these are Windy, OS/2, or the older philips ATM's etc.

I'm interested as I use to service ATM's as well :-)
Title: Re: Cybergang Compromises Every ATM In Russian City
Post by: ivan on 2010.12.05, 18:00:28
There is also a good report in the Register.  http://www.theregister.co.uk/2010/12/03/russian_atm_malware_scam/ (http://www.theregister.co.uk/2010/12/03/russian_atm_malware_scam/)

ivan
Title: Re: Cybergang Compromises Every ATM In Russian City
Post by: RobertM on 2010.12.05, 23:19:20
There are a number of other articles that seem to indicate they are Windows machines, as well as a number that indicate that a large portion of Russian ATMs are running on pirated copies of Windows.

I have no idea of the accuracy of those articles, but then again, I cannot remember a single incident of an OS/2 ATM machine being hacked. Theoretically, bad programming of the interface applications for an OS/2 ATM would allow it, but after 2.5 decades, I suspect such an attempt would have succeeded a long time ago.